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Claims 

1 . (Currently amended) Apparatus for decrypting of an encrypted electronic document 
by means of a key data file that is received or delivered from a server over a 
public data transmission network, preferably the Internet, 
whereby the decrypted electronic document is displayable on a local data 
processing appliances, 

and a decryption unit that is used for combining or joining or decrypting the 
encrypted document and the key data file for generating the decrypted document, 
characterized in that 

the decryption unit comprise a function unit that is technically changeable by 
means of a program whereby the function unit is capable to be configurable in an 
operating state 

• by selecting a key data file from a plurality of local or server sided 
available key data files or 

• by the combination or integration of necessary operations of the 
decryption unit used for the creation of the decrypted document or 

• by the accessing of a predetermined server sided address that provide 
the key data file, 

whereby a decryption operation of the decryption unit is determined in a manner 
that only a predetermined configuration of the function unit is combining or joining 
or decrypting the encrypted electronic document and the key data file for 
generating the correct decrypted document, 

whereby the predetermined configuration of the function unit is established with 
at least one single online-contact of the local data processing appliance with the 
server and 

whereby the predetermined configuration of the function unit is created 

• via a parameter setting specifically adapted to the function unit or to the 
decryption unit or 

• via an assignment of a predetermined program files or a command 
components to the function unit or to the decryption unit or 

• via a plurality of instructions that generate the functions unit or to the 
decryption unit. 
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2. (Original) Apparatus as set forth in claim 1, characterized in that the 
visualization or representation unit is realized as browser and the 
decryption unit is used by a plug-in in the browser, or the decryption unit is 
integrated in the browser, or the decryption unit is arranged as an 
approachable local server unit on the local data processing appliance, or a 
function unit on the local data processing unit is connected for instance 
called over a Intranet-connection belongs to the decryption appliance of 
the remote data processing unit. 

3. (Original) Apparatus as set forth in claim 1, characterized in that the 
function unit is realized as a program library of the decryption unit or a 
visualization or representation unit, as executable file or as command line 
or element of the decryption unit on an operation system platform of the 
local data processing appliances that is preferably managed or realized by 
a programming- or script language and in particular by means of a digital 
signature, that is formed on the function unit and that is capable to 
recognize that an execution operation of the decryption unit, is correct, not 
manipulated or properly known and thereby capable to be evaluated in a 
result influenced manner. 

4. (Original) Apparatus as set forth in claim 1, characterized in that the 
encrypted electronic document is realized by means of a encryption 
procedure, in which the encrypted document and the key data file are 
generated from the decrypted document that correspond to original 
amount of data, which comprise a sequence of information component of 
a meta language in form of a written language, a number system or 
information components from a predetermined uniform format structure of 
arranged or ordered data elements, in particular image-, sound- or 
program information, that data elements are stored in a plurality of 
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electronic addressable storage areas and that the encrypted document is 

generated by following operations: 

Exchanging or removing of an information component in the amount 
of data or attaching of an information component at a 
predetermined position in the sequence of information components 
or replacing of an information components against a preferred 
information component that is not contained in the original amount 
of data not contained, 

whereby the key data file comprise specific information about the 
exchanged, removed, inserted, attached or interchanged 
information component and is thereby arranged in manner that a 
reconstruction of the original amount of data is permitted. 

5. (Original) Apparatus as set forth in claim 4, characterized in that the 
decryption unit is realized as a reconstruction unit, so that the processing 
of the encrypted amount of data and the key data file is arranged for 
generating of the decrypted document. 

6. (Original) Apparatus as set forth in claim 4, characterized in that each 
encrypted document is assigned to a plurality of usable key data files by 
the decryption unit, whereby at least one is usable to generate the 
decrypted electronic document, and at least one is usable to generate a 
document that is for a user seemingly correct, however which is not 
arranged or designed as the correct decrypted document that is 
corresponding to the electronic document. 

7. (Original) Apparatus as set forth in claim 1, characterized in that for 
generating of the decrypted document a plurality of key data file is 
necessary. 
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8. (Original) Apparatus as set forth in claim 1, characterized in that the 
necessary operation procedure that is used for the combination or 
integration for the generation or creation of the decrypted document 
comprise the selecting of a key data file from a plurality of key data files or 
comprise the producing of a sequence of successive decryption steps or 
comprise the needed key data files used for the combination or 
integration. 

9. (Original) Apparatus as set forth in claim 1, characterized in that the 
predetermined configuration is designed in a document specific manner, in 
particular after expiring of a predetermined period of usage time a 
decrypted electronic document requires a renewed decryption after 
renewed configuration. 

10. (Original) Apparatus as set forth in claim 1, characterized in that the 
predetermined configuration is dependent from the local data processing 
appliance and in particular specifically designed or arranged for the 
appliance. 

11. (Original) Apparatus as set forth in claim 1, characterized in that the 
decryption unit is designed or arranged in an manner that a repeated or 
new decryption of the encrypted document occurs by means of a 
configuration of the function unit, which differ from the configuration of a 
foregoing decryption process and in particular is influenced by operation or 
status data of the foregoing decryption process. 

12. (Original) Apparatus as set forth in claim 1, characterized in that the 
decryption unit is assigned to a plurality of function units, whereby the 
decryption unit comprise the configuration, the selecting of one of the 
function units and its assigning to a decryption operation. 
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13. (Original) Apparatus as set forth in claim 12, characterized in that the 
corresponding function unit from the plurality of function units is different 
with regard to its effect on the decryption operation of the encryption unit 
and which are preferably realized as binary files resp. modules. 

14. (Original) Apparatus as set forth in claim 1, characterized in that the key 
data file is realized as an executable program, which is acting as a 
function unit of the decryption unit, whereby in particular information for 
generation of the decrypted document arises from interactions between 
components, internal variables or other program parameters of the 
executable program and are acting on the encrypted document. 

15. (Original) Apparatus as set forth in claim 1, characterized in that the 
electronic document is selected from the group, which consist of audio-, 
music-, video-, program-, multimedia-, animations-, 3D-, text-, image- or 
game files. 

16. (Original) Apparatus as set forth in claim 1, characterized in that server 
sided of a server unit comprise a proxy unit that is installed in front of the 
server unit, which is approachable or callable by function of the function 
unit and which execute an identification or authentification process of the 
called local data processing appliance, in particular for comparing 
document related usage right of the user on the local data processing 
appliance with the server sided introducible or deliverable key data files. 

17. (Original) Method for decrypting of an encrypted electronic document by 
means of a key data file that is introduced or delivered from a server over 
a public data transmission network, preferably the Internet, in particular 
method for operating the apparatus as set forth in claim 1, 

whereby the decrypted electronic document is displayable on a local data 
processing appliances, which comprise a visualization unit or 
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representation unit that enables an outputting of the unencrypted 
electronic document 

and which comprise a decryption unit that is used for combining or joining 
the encrypted document and the key data file for the generating of the 
decrypted document, with the steps: 

transmitting of the key data file partly or completely over the data 

transmission network, 

transmitting of at least one predetermined function unit of the 
decryption unit as file, command components or script over the data 
transmission network to the local data processing appliance, 
activating of the decryption unit, 

decrypting of the encrypted document by electronic processing of a 
data stream that is corresponding to the key data file or to the 
encrypted document by means of the predetermined function unit 
and 

displaying of the decrypted document by means of the visualization 
or representation unit. 



